HardBreacher Exploit Targets Kaspersky Endpoint Security Zero

Gbhackers •Divya • August 31, 2026

A proof of concept called HardBreacher allegedly exploits an unpatched local privilege escalation flaw in Kaspersky Antivirus for Endpoint. This vulnerability allows a local user to control a privileged component. The code was published by a GitHub user named MSNightmare and is being presented as a zero-day vulnerability. However, the vendor has not confirmed it. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Nightmare Eclipse Releases Kaspersky Exploit 'HardBreacher' A researcher known as Nightmare Eclipse has released a proof-of-concept (PoC) exploit named HardBreacher, targeting a privilege escalation vulnerability in Kaspersky Endpoint Security. This exploit affects fully patched Windows 11 systems running Kaspersky Endpoint v14.0.0.504. The PoC is described as unstable and may require multiple attempts to execute successfully. When successful, it can create a DLL file in System32 with full user permissions, potentially disrupting Kaspersky's functionality and compromising system security. Kaspersky has stated that the underlying issue has been resolved through an automatic update. However, the exploit remains unverified and has not been assigned a CVE by Kaspersky. The researcher has a history of releasing exploits after criticizing vendors' responses to vulnerability reports, raising concerns about responsible disclosure practices. 6 sources 58

Extracted Entities

HardBreacher Exploit Targets Kaspersky Endpoint Security Zero

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)